Set up the LEDGER device and install the Concordium LEDGER App#

Warning

The steps here are only for members of the governance committee. If you are not a member of the governance committee, see Install the Concordium LEDGER app using LEDGER Live for instructions on how to install.

See also

To read about the latest changes, see the changelog.

To be able to sign and send transactions using the Desktop Wallet, you need a LEDGER hardware wallet, and you need to install the Concordium LEDGER Application on the LEDGER device. You can use Windows, macOS or Ubuntu to install the app.

Note

The LEDGER NANO X is not supported currently.

Prerequisites#

  • LEDGER hardware wallet

Warning

During the process described in this guide, you’ll generate private keys on the LEDGER device, and you’ll receive a 24-word recovery phrase. This is the only backup of your private keys. Make sure that you store it securely.

Set up the LEDGER device#

The LEDGER device will generate the unique 24-word recovery phrase that is used to derive your private keys.

  1. Download and install Ledger Live. For information on how to do this, see Ledger’s documentation. You’ll only need Ledger Live when you set up the LEDGER device and update the firmware.

  2. Open Ledger Live, select Get started, and then select Nano S or Nano S Plus.

  3. Follow the on-screen setup instructions to set up your PIN code on the LEDGER device.

  4. Follow the on-screen instructions to get your 24-word recovery phrase.

Warning

Make sure that you write down the recovery phrase precisely as displayed and in the correct order. The recovery phrase is the only backup of your private keys.

Once you’ve set up the LEDGER device, you must check that it’s running the proper firmware version for your device. The Concordium LEDGER App currently supports LEDGER firmware version 2.1.0 for the LEDGER NANO S and 1.0.3 for LEDGER NANO S PLUS.

Update the LEDGER device firmware#

Note

LEDGER firmware version 2.0.0 is no longer supported for the LEDGER NANO S.

To find out which firmware version the LEDGER device is running, do the following:

  1. On the LEDGER device press both buttons for a little while until the Settings icon appears. Press both buttons to enter the Settings menu.

  2. On the NANO S PLUS press both buttons on the General menu item.

  3. Press the right button to navigate to Firmware version.

  4. Press both buttons to view the Secure Element version.

    • For NANO S, if it says 2.1.0, you don’t have to update the firmware. If there’s a lower version number, you’ll have to update the firmware.

    • For NANO S PLUS, if it says 1.1.0, you don’t have to update the firmware. If there’s a lower version number, you’ll have to update the firmware.

For details on how to update the LEDGER firmware, see LEDGER NANO S guide or LEDGER NANO S PLUS guide.

Ledger packages#

Once you have updated the firmware version, you can download the LEDGER app:

When installing the certificate, ensure that the public key of the certificate is 04af7e6a68fa79b3f7a035a5cd75f916ee67c4a71fc990fe9ba2b2e1fb54dd7cdc950a73b5a4adf52ea95df16f5c17602090f639f0d35a760e34afae7cbd60792b.

Follow the instructions below to update your app:

It should not be necessary to update the certificate.

See the changelog(link) for this governance version of the app.

Install Concordium LEDGER app on Windows#

Install Python3 and pip#

  1. In the Start menu, type store to open the Microsoft store.

  2. In Search, in the upper right corner, enter python.

  3. Select Python 3.9, and then select Install.

    Python is downloaded and installed automatically. Depending on the setup of your computer, you might see a message saying Python 3.9 just got installed.

Restart your computer, and then confirm that Python and Pip were installed.

  1. In the Start menu, type PowerShell and select Windows PowerShell. The command-line window opens.

  2. To confirm that Python3 was installed, enter

    $Python3 --version

  3. To confirm that the package manager named pip is installed, enter

    $pip --version

  4. To install Python tools for the LEDGER NANO S, enter

    $pip install ledgerblue

Install the custom certificate on Windows#

You now have to install a custom certificate on the LEDGER device to ensure that it trusts applications signed by Concordium’s private key.

  1. Close all applications that might be connected to the LEDGER device such as LEDGER LIVE and Concordium Desktop Wallet and keep them closed until you’ve completed the steps in this guide.

  2. Disconnect the LEDGER device from your computer.

  3. Download the ZIP folder with Concordium LEDGER application.

  4. Extract the files from the ZIP folder to a folder on your computer.

  5. Now you need to start recovery mode on the LEDGER device.

    • On the NANO S, press the right button and hold it down while you reconnect the LEDGER device to the computer until the LEDGER device says recovery.

    • On the NANO S PLUS, press the left button and hold it down while you reconnect the LEDGER device to the computer. Navigate to Recovery mode and press both buttons to enter recovery mode.

  6. Enter your PIN code.

  7. Open the folder you extracted the files to and double-click the loadcertificate.bat file. If there’s a message saying Windows protected your PC, select More info, and then select Run anyway. A command-line window opens.

  8. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. You can safely ignore the message in the command-line window saying Broken certificate chain - loading from user key. This is expected behavior.

  9. The LEDGER device says Certificate concordium. Press the right button to navigate through the key, while confirming that it is the following:

    • 04af7e6a68fa79b3f7a035a5cd75f916ee67c4a71fc990fe9ba2b2e1fb54dd7cdc950a73b5a4adf52ea95df16f5c17602090f639f0d35a760e34afae7cbd60792b

and then press both buttons when the LEDGER device says Trust certificate.

  1. Enter your PIN. The certificate has now been installed on the LEDGER device.

Install the Concordium LEDGER app on Windows#

  1. In the folder that you extracted the files to, double-click the install.bat file. If there’s a message saying Windows protected your PC, select More info, and then select Run anyway.

  2. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. The LEDGER device says Loading, please wait while it installs the app.

  3. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. You can now use the LEDGER device with the Desktop Wallet.

Update the Concordium LEDGER app on Windows#

For the app to work properly with the current version of the Desktop Wallet, make sure that you update to the latest version of the app.

Note

Before updating, verify that you have installed Python3, pip, and the Python tools for LEDGER (ledgerblue) before updating the app.

  1. Download the LEDGER app if you haven’t done so already.

  2. In the folder that you extracted the files to, double-click the install.bat file. If there’s a message saying Windows protected your PC, select More info, and then select Run anyway.

Note

If you get the error loadApp.py: error: unrecognized arguments: --apiLevel 1 this means that you have an older version of the Python tools for LEDGER (ledgerblue). To update, run $pip3 install ledgerblue --upgrade.

  1. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons.

  2. Before you can install the new version of the LEDGER app, you have to uninstall the old one. The LEDGER device says Uninstall Concordium. Press the right button to navigate through the identifier until the LEDGER device says Confirm action. Press both buttons to confirm. The LEDGER device says Loading, please wait while it installs the app.

  3. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. Press the left button to verify that you’ve installed the latest version of the LEDGER app.

Install Concordium LEDGER app on macOS#

Install Homebrew, Python3, and pip#

  1. Open the Terminal application.

  2. Navigate to where you have downloaded the LEDGER install package. For example, this might be ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip. To navigate to this directory in a Terminal, enter cd ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip.

  3. Install the package manager Homebrew; you will need the Homebrew tool to install the remaining dependencies. Copy the following line into the Terminal and press enter.

    $/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

  4. To install Python3, Pip3, libusb, and libjpeg, copy the following into the Terminal and press Enter:

    $brew install [email protected] libusb libjpeg

    You can use pyenv<https://github.com/pyenv/pyenv> if you need multiple python versions. Installing libjpeg is only necessary if you have a Mac with an M1 or similar Apple Silicon CPU.

  5. To install ledgerblue, copy the following into the Terminal and press Enter:

    $pip3 install ledgerblue

Install the custom certificate using macOS#

You now have to install a custom certificate to ensure that the LEDGER device trusts applications signed by Concordium’s private key.

  1. Close all applications that might be connected to the LEDGER device such as LEDGER LIVE and Concordium Desktop Wallet and keep them closed until you’ve completed the steps in this guide.

  2. Download the ZIP folder with the Concordium LEDGER application.

  3. Extract the files from the ZIP folder to a folder on your computer.

  4. Disconnect the LEDGER device from your computer.

  5. Now you need to start recovery mode on the LEDGER device.

    • On the NANO S, press the right button and hold it down while you reconnect the LEDGER device to the computer. The LEDGER device says recovery mode.

    • On the NANO S PLUS, press the left button and hold it down while you reconnect the LEDGER device to the computer. Navigate to Recovery mode and press both buttons to enter recovery mode.

  6. Enter your PIN code.

  7. Open the Terminal application.

  8. Navigate to where you have downloaded the LEDGER install package. For example, this might be ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip. To navigate to this directory in a Terminal, enter cd ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip.

  9. Load the certificate onto the LEDGER device by running the following script from the extracted folder:

    $./loadcertificate.sh

  10. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. You can safely ignore the message in the command-line window saying Broken certificate chain - loading from user key. This is expected behavior.

  11. The LEDGER device says Certificate concordium. Press the right button to navigate through the key, while confirming that it is the following:

    • 04af7e6a68fa79b3f7a035a5cd75f916ee67c4a71fc990fe9ba2b2e1fb54dd7cdc950a73b5a4adf52ea95df16f5c17602090f639f0d35a760e34afae7cbd60792b

and then press both buttons when the LEDGER device says Trust certificate.

  1. Enter your PIN. The certificate has now been installed on the LEDGER device .

Install the Concordium LEDGER app on MacOS#

  1. Open the Terminal application.

  2. Navigate to where you have downloaded the LEDGER install package. For example, this might be ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip. To navigate to this directory in a Terminal, enter cd ~/Downloads/concordium-governance-ledger-app-1.0.0-nanos-2.1.0.zip.

  3. Install the Concordium application on the LEDGER device by running the following script from the folder you extracted the files to:

    $./install.sh

  4. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. The LEDGER device says Loading, please wait while it installs the app.

  5. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. You can now use the LEDGER device with the Desktop Wallet.

Update/reinstall the Concordium LEDGER app on macOS#

For the app to work properly with the current version of the Desktop Wallet, make sure that you update to the latest version of the app.

When you update your LEDGER device, it should not be necessary to update the certificate.

Note

If you’re using a different computer than the one you used when you installed the app, you must install Python3, pip, and the Python tools tools for LEDGER (ledgerblue) before updating the app.

  1. Download the LEDGER app if you haven’t done so already.

  2. Open the Terminal application.

  3. Navigate to where you have downloaded the LEDGER install package. For example, this might be ~/Downloads/concordium-ledger-app-2.0.3-target-2.1.0. To navigate to this directory in a Terminal, enter cd ~/Downloads/concordium-ledger-app-2.0.3-target-2.1.0.

  4. Install the Concordium application on the LEDGER device by running the following script from the folder you extracted the files to:

    ./install.sh

Note

If you get the error loadApp.py: error: unrecognized arguments: --apiLevel 1 this means that you have an older version of the Python tools for LEDGER (ledgerblue). To update, run $pip3 install ledgerblue --upgrade.

  1. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager.

  2. Before you can install the new version of the LEDGER app, you have to uninstall the old one. The LEDGER device says Uninstall Concordium. Press the right button to navigate through the identifier until the LEDGER device says Confirm action. Press both buttons to confirm. The LEDGER device says Loading, please wait while it installs the app.

  3. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. Press the left button to verify that you’ve installed the latest version of the LEDGER app.

Install Concordium LEDGER app on Ubuntu#

Install Python3 and pip on Ubuntu#

  1. Add udev rules. For more information, see the Linux section in LEDGER ‘s guide Fix connection history.

    $wget -q -O - https://raw.githubusercontent.com/LedgerHQ/udev-rules/master/add_udev_rules.sh | sudo bash

  1. Install python3:

    $sudo apt-get install python3

  2. Install pip:

    $sudo apt-get install python3-pip

  3. Install

    $sudo apt-get install libudev-dev libusb-1.0-0-dev python-dev

  4. Install ledgerblue:

    $sudo pip3 install ledgerblue

Install the custom certificate on Ubuntu#

You now have to install a custom certificate to ensure that the LEDGER device trusts applications signed by Concordium’s private key.

  1. Close all applications that might be connected to the LEDGER device such as LEDGER LIVE and Concordium Desktop Wallet and keep them closed until you’ve completed the steps in this guide.

  2. Download the ZIP folder with the Concordium LEDGER application.

  3. Extract the files from the ZIP folder to a folder on your computer.

  4. Disconnect the LEDGER device from your computer.

  5. Now you need to start recovery mode on the LEDGER device.

    • On the Nano S, press the right button and hold it down while you reconnect the LEDGER device to the computer. The LEDGER device says recovery mode.

    • On the Nano S Plus, press the left button and hold it down while you reconnect the LEDGER device to the computer. Navigate to Recovery mode and press both buttons to enter recovery mode.

  6. Enter your PIN code.

  7. Run the following script from the folder you extracted the files to:

    $./loadcertificate.sh

  8. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. You can safely ignore the message in the command-line window saying Broken certificate chain - loading from user key. This is expected behavior.

  9. The LEDGER device says Certificate concordium. Press the right button to navigate through the key, while confirming that it is the following:

    • 04af7e6a68fa79b3f7a035a5cd75f916ee67c4a71fc990fe9ba2b2e1fb54dd7cdc950a73b5a4adf52ea95df16f5c17602090f639f0d35a760e34afae7cbd60792b

and then press both buttons when the LEDGER device says Trust certificate.

  1. Enter your PIN. The certificate has now been installed on the LEDGER device.

Install the Concordium LEDGER app on Ubuntu#

  1. Install the Concordium application on the LEDGER device by running the following script from the folder you extracted the files to:

    $./install.sh

  1. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager. Press both buttons. The LEDGER device says Loading, please wait while it installs the app.

  2. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. You can now use the LEDGER device with the Desktop Wallet.

Update the Concordium LEDGER app on Ubuntu#

For the app to work properly with the current version of the Desktop Wallet, make sure that you update to the latest version of the app.

Note

If you’re using a different computer than the one you used when you installed the app, you must install Python3, pip, and the Python tools for LEDGER (ledgerblue) before updating the app.

  1. Download the latest version of the LEDGER app if you haven’t done so already.

  2. Run the install.sh file from the folder that you extracted the files to.

Note

If you get the error loadApp.py: error: unrecognized arguments: --apiLevel 1 this means that you have an older version of the Python tools for LEDGER (ledgerblue). To update, run $sudo pip3 install ledgerblue --upgrade.

  1. The LEDGER device says Deny unsafe manager. Press the right button to navigate through the public key until the LEDGER device says Allow unsafe manager.

  2. Before you can install the new version of the LEDGER app, you have to uninstall the old one. The LEDGER device says Uninstall Concordium. Press the right button to navigate through the identifier until the LEDGER device says Confirm action. Press both buttons to confirm. The LEDGER device says Loading, please wait while it installs the app.

  3. The LEDGER device says Concordium. Press both buttons. The LEDGER device says Concordium is ready. Press the left button to verify that you’ve installed the latest version of the LEDGER app.

Was this article helpful?